medium6.8Public exploit code
CVE-2008-2841
Argument injection vulnerability in XChat 2.8.7b and earlier on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary commands …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- XChat 2.8.7b - 'URI Handler' Remote Code Execution (Internet Explorer 6/7)2008-06-13 · remote · windows · Verified
Impact
Argument injection vulnerability in XChat 2.8.7b and earlier on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary commands via the --command parameter in an ircs:// URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Internet Explorer | All versions |
| Xchat | Xchat | through 2.8.7b |
Weakness classification
References
- NVD record
- CVE.org record
- http://forum.xchat.org/viewtopic.php?t=4218
- http://secunia.com/advisories/30695
- http://www.securityfocus.com/bid/29696
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43065
- https://www.exploit-db.com/exploits/5795
- http://forum.xchat.org/viewtopic.php?t=4218
- http://secunia.com/advisories/30695
- http://www.securityfocus.com/bid/29696
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43065
- https://www.exploit-db.com/exploits/5795